Apache Camel XML External Entity Injection Vulnerability

Apache Camel is the United States Apache Apache Software Foundation of a set of open source based on Enterprise Integration Pattern Enterprise Integration Pattern, referred to as EIP integration framework. The framework provides Enterprise Integration Pattern Java objects POJO implementation , an...

CVE-2019-0194

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

com.garethahealy.elastawatch:elastic-loader (=6.4.0), com.github.bjuvensjo:rsimulator-camel-direct (>=2.1.2 <=2.1.12) +728 more potentially affected by CVE-2019-0194 via org.apache.camel:camel-core (>=2.22.0 <=2.22.2)

org.apache.camel:camel-core MAVEN version =2.22.0, =2.1.2, =2.1.2, =0.2.1, =0.1, =2.22.0, =2.22.1 - edu.amherst.acdc:acrepo-connector-broadcast =1.2.0 - edu.amherst.acdc:acrepo-connector-idiomatic =1.2.0 - edu.amherst.acdc:acrepo-connector-triplestore =1.2.0 -...

com.cognifide.aet:cleaner (>=3.0.0 <=3.2.2), com.cognifide.aet:communication (>=3.0.0 <=3.2.2) +724 more potentially affected by CVE-2019-0194 via org.apache.camel:camel-core (>=2.21.0 <=2.21.4)

org.apache.camel:camel-core MAVEN version =2.21.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =0.1.7, =2.21.0, =0.0.1, =0.1.23, =0.6.0, =0.6.0, =0.6.0, =0.7.0 and more Source cves: CVE-2019-0194 Source advisory: OSV:GHSA-4WJQ-69RC-8WCP...

com.github.oscerd:camel-cassandra (=2.23.0), com.playtika.sleuth:sleuth-camel-core (=1.0.2) +664 more potentially affected by CVE-2019-0194 via org.apache.camel:camel-core (=2.23.0)

org.apache.camel:camel-core MAVEN version =2.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.github.oscerd:camel-cassandra =2.23.0 - com.playtika.sleuth:sleuth-camel-core =1.0.2 -...

GHSA-4WJQ-69RC-8WCP Path Traversal in Apache Camel

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

Path Traversal in Apache Camel

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

CVE-2019-0194

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

Directory traversal

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

CVE-2019-0194

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

CVE-2019-0194

CVE-2019-0194 affects Apache Camel’s File component and enables directory traversal in Camel versions 2.21.0–2.21.3, 2.22.0–2.22.2, 2.23.0, and some older 2.x lines. Connected sources confirm this is a known vulnerability in multiple products (e.g., IBM Tivoli Netcool/OMNIbus components and Resil...

CVE-2019-0194

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

camel: Directory traversal in file producer

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x 2.19 and earlier versions may be also affected...

Apache Camel Path Traversal Vulnerability

Apache Camel is the United States Apache Apache Software Foundation of a set of open source based on Enterprise Integration Pattern Enterprise Integration Pattern, referred to as EIP integration framework. The framework provides Enterprise Integration Pattern Java objects POJO implementation , an...

com.github.chrisgleissner:spring-batch-rest-api (>=1.0.3 <=1.2.7), com.github.chrisgleissner:spring-batch-rest-example (>=1.0.3 <=1.2.7) +7 more potentially affected by CVE-2019-3774 via org.springframework.batch:spring-batch-core (=4.1.0.RELEASE)

org.springframework.batch:spring-batch-core MAVEN version =4.1.0.RELEASE is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.batch:spring-batch-core and may be impacted: - com.github.chrisgleissner:spring-batch-rest-api =1.0.3, =1.0.3,...

camel-mail: path traversal vulnerability

Apache Camel's Mail 2.20.0 through 2.20.3, 2.21.0 through 2.21.1 and 2.22.0 is vulnerable to path traversal...

Important: Red Hat Security Advisory: Red Hat Fuse 7.2 security update

An update is now available for Red Hat Fuse. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

RHEL 6 : activemq (RHSA-2014:0254)

An updated activemq package that fixes multiple security issues is now available for Red Hat OpenShift Enterprise 1.2.7. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

org.apache.activemq:apache-activemq (>=5.0.0 <=5.15.16), org.apache.axis2:axis2-integration (=1.4) +3 more potentially affected by CVE-2018-8006 via org.apache.activemq:activemq-web-console (>=5.0.0 <=5.15.5)

org.apache.activemq:activemq-web-console MAVEN version =5.0.0, =5.0.0, =5.15.16 - org.apache.axis2:axis2-integration =1.4 - org.apache.camel:camel-example-cxf =1.3.0 - org.apache.camel:camel-example-jms-file =1.3.0 - org.apache.camel:camel-example-spring-xquery =1.3.0 Source cves: CVE-2018-8006...

com.bluelock:camel-spring-amqp (>=1.5 <=1.6.3), com.github.jknack:mwa-camel (=0.4.0) +215 more potentially affected by CVE-2014-0003 via org.apache.camel:camel-core (>=2.11.0 <=2.11.3)

org.apache.camel:camel-core MAVEN version =2.11.0, =1.5, =1.5, =1.5, =1.5, =1.5, =1.0.0, =5.14, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.3 and more Source cves: CVE-2014-0003 Source advisory: OSV:GHSA-H6RP-8V4J-HWPH...